Fase 0: scaffold monorepo, SvelteKit skeleton, and dev infrastructure
- Turborepo + pnpm workspaces with apps/web and packages/types - SvelteKit app: Tailwind, Paraglide i18n (en/es), keycloak-js, Supabase client, auth/collective stores, PWA service worker skeleton, all route placeholders - packages/types: domain types (User, Collective, ShoppingList, etc.) and database.ts placeholder for generated types - Justfile with dev, db-*, kc-*, build, backup, restore, deploy recipes - infra/docker-compose.dev.yml: Postgres 15, GoTrue, PostgREST, Realtime v2.83, Storage, Kong (port 8001), Studio, Keycloak 24 - infra/docker-compose.prod.yml, kong.yml, db-init scripts, backup/deploy scripts - keycloak/realm-export.json with colectivo realm and 5 dev test users - supabase/config.toml and seed.sql with sample collective and items - GitHub Actions: ci.yml (lint+typecheck+build) and deploy.yml (GHCR + SSH) - .env.example documenting all required variables - Fixed docker-compose issues: Studio image tag, Kong port conflict (8001), internal role passwords init script, Realtime METRICS_JWT_SECRET/APP_NAME Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
27
infra/scripts/backup-cron.sh
Executable file
27
infra/scripts/backup-cron.sh
Executable file
@@ -0,0 +1,27 @@
|
||||
#!/usr/bin/env bash
|
||||
# backup-cron.sh — intended to be run by cron on the production host.
|
||||
# Example crontab entry (daily at 03:00 UTC):
|
||||
# 0 3 * * * /opt/colectivo/infra/scripts/backup-cron.sh >> /var/log/colectivo-backup.log 2>&1
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
||||
LOG_PREFIX="[$(date -u +"%Y-%m-%dT%H:%M:%SZ")] backup-cron:"
|
||||
|
||||
# Load env vars from the production .env
|
||||
if [ -f "$SCRIPT_DIR/../../.env" ]; then
|
||||
# shellcheck disable=SC1091
|
||||
set -a; source "$SCRIPT_DIR/../../.env"; set +a
|
||||
fi
|
||||
|
||||
echo "$LOG_PREFIX Starting scheduled backup"
|
||||
"$SCRIPT_DIR/backup.sh" supabase
|
||||
echo "$LOG_PREFIX PostgreSQL backup done"
|
||||
|
||||
"$SCRIPT_DIR/backup.sh" keycloak
|
||||
echo "$LOG_PREFIX Keycloak backup done"
|
||||
|
||||
# Prune local temp files older than 1 day
|
||||
find /tmp/colectivo-backups -type f -mtime +1 -delete 2>/dev/null || true
|
||||
|
||||
echo "$LOG_PREFIX All done"
|
||||
49
infra/scripts/backup.sh
Executable file
49
infra/scripts/backup.sh
Executable file
@@ -0,0 +1,49 @@
|
||||
#!/usr/bin/env bash
|
||||
# backup.sh — manual backup of a service
|
||||
# Usage: just backup supabase
|
||||
# Uploads a timestamped dump to Backblaze B2.
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
SERVICE="${1:-supabase}"
|
||||
TIMESTAMP=$(date -u +"%Y%m%dT%H%M%SZ")
|
||||
BACKUP_DIR="${BACKUP_DIR:-/tmp/colectivo-backups}"
|
||||
mkdir -p "$BACKUP_DIR"
|
||||
|
||||
case "$SERVICE" in
|
||||
supabase|postgres|db)
|
||||
DUMP_FILE="$BACKUP_DIR/postgres-$TIMESTAMP.dump"
|
||||
echo "==> Dumping PostgreSQL → $DUMP_FILE"
|
||||
docker compose -f "$(dirname "$0")/../docker-compose.prod.yml" exec -T db \
|
||||
pg_dumpall -U postgres --clean --if-exists \
|
||||
| gzip > "$DUMP_FILE.gz"
|
||||
DUMP_FILE="$DUMP_FILE.gz"
|
||||
;;
|
||||
keycloak)
|
||||
DUMP_FILE="$BACKUP_DIR/keycloak-$TIMESTAMP.json"
|
||||
echo "==> Exporting Keycloak realm → $DUMP_FILE"
|
||||
docker compose -f "$(dirname "$0")/../docker-compose.prod.yml" exec keycloak \
|
||||
/opt/keycloak/bin/kc.sh export \
|
||||
--realm colectivo \
|
||||
--users realm_file \
|
||||
--file /tmp/kc-export.json
|
||||
docker compose -f "$(dirname "$0")/../docker-compose.prod.yml" cp \
|
||||
keycloak:/tmp/kc-export.json "$DUMP_FILE"
|
||||
gzip "$DUMP_FILE"
|
||||
DUMP_FILE="$DUMP_FILE.gz"
|
||||
;;
|
||||
*)
|
||||
echo "Unknown service: $SERVICE. Use 'supabase' or 'keycloak'." >&2
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
|
||||
echo "==> Uploading $(basename "$DUMP_FILE") to B2 bucket: ${B2_BUCKET_NAME}"
|
||||
b2 file upload \
|
||||
--contentType application/octet-stream \
|
||||
"$B2_BUCKET_NAME" \
|
||||
"$DUMP_FILE" \
|
||||
"backups/$(basename "$DUMP_FILE")"
|
||||
|
||||
echo "==> Backup complete: $(basename "$DUMP_FILE")"
|
||||
rm -f "$DUMP_FILE"
|
||||
53
infra/scripts/deploy.sh
Executable file
53
infra/scripts/deploy.sh
Executable file
@@ -0,0 +1,53 @@
|
||||
#!/usr/bin/env bash
|
||||
# deploy.sh — deploy to production via SSH
|
||||
# Called by: just deploy
|
||||
#
|
||||
# Prerequisites:
|
||||
# - DEPLOY_HOST and DEPLOY_PATH set in .env
|
||||
# - SSH key configured for passwordless access
|
||||
# - Docker image already pushed to GHCR (done by CI)
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
||||
|
||||
# Load env
|
||||
if [ -f "$SCRIPT_DIR/../../.env" ]; then
|
||||
# shellcheck disable=SC1091
|
||||
set -a; source "$SCRIPT_DIR/../../.env"; set +a
|
||||
fi
|
||||
|
||||
DEPLOY_HOST="${DEPLOY_HOST:?Set DEPLOY_HOST in .env}"
|
||||
DEPLOY_PATH="${DEPLOY_PATH:-/opt/colectivo}"
|
||||
IMAGE_TAG="${IMAGE_TAG:-latest}"
|
||||
|
||||
echo "==> Deploying colectivo to $DEPLOY_HOST:$DEPLOY_PATH (tag: $IMAGE_TAG)"
|
||||
|
||||
# 1. Copy compose file and scripts to server
|
||||
rsync -az --delete \
|
||||
"$SCRIPT_DIR/../docker-compose.prod.yml" \
|
||||
"$SCRIPT_DIR/../kong.yml" \
|
||||
"$DEPLOY_HOST:$DEPLOY_PATH/infra/"
|
||||
|
||||
# 2. SSH: pull image, restart services with zero downtime
|
||||
ssh "$DEPLOY_HOST" bash -s << EOF
|
||||
set -euo pipefail
|
||||
cd "$DEPLOY_PATH"
|
||||
|
||||
echo "--- Pulling latest image (tag: $IMAGE_TAG)"
|
||||
IMAGE_TAG="$IMAGE_TAG" docker compose -f infra/docker-compose.prod.yml pull app
|
||||
|
||||
echo "--- Rolling restart of app service"
|
||||
IMAGE_TAG="$IMAGE_TAG" docker compose -f infra/docker-compose.prod.yml up -d --no-deps app
|
||||
|
||||
echo "--- Running pending DB migrations"
|
||||
docker compose -f infra/docker-compose.prod.yml exec -T db \
|
||||
psql -U postgres -f /docker-entrypoint-initdb.d/migrations.sql 2>/dev/null || true
|
||||
|
||||
echo "--- Pruning old images"
|
||||
docker image prune -f
|
||||
|
||||
echo "--- Deploy done"
|
||||
EOF
|
||||
|
||||
echo "==> Deployment complete"
|
||||
37
infra/scripts/restore.sh
Executable file
37
infra/scripts/restore.sh
Executable file
@@ -0,0 +1,37 @@
|
||||
#!/usr/bin/env bash
|
||||
# restore.sh — restore a backup file to a service
|
||||
# Usage: just restore supabase backups/postgres-20240101T030000Z.dump.gz
|
||||
#
|
||||
# WARNING: This is destructive. It will drop and re-create the database.
|
||||
# Only run on a stopped or isolated instance.
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
SERVICE="${1:?Usage: restore.sh <service> <file>}"
|
||||
FILE="${2:?Usage: restore.sh <service> <file>}"
|
||||
|
||||
if [ ! -f "$FILE" ]; then
|
||||
echo "File not found: $FILE" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
COMPOSE="docker compose -f $(dirname "$0")/../docker-compose.prod.yml"
|
||||
|
||||
case "$SERVICE" in
|
||||
supabase|postgres|db)
|
||||
echo "==> Restoring PostgreSQL from $FILE"
|
||||
echo " WARNING: This will overwrite all data. Press Ctrl-C within 5s to abort."
|
||||
sleep 5
|
||||
|
||||
if [[ "$FILE" == *.gz ]]; then
|
||||
gunzip -c "$FILE" | $COMPOSE exec -T db psql -U postgres
|
||||
else
|
||||
$COMPOSE exec -T db psql -U postgres < "$FILE"
|
||||
fi
|
||||
echo "==> Restore complete"
|
||||
;;
|
||||
*)
|
||||
echo "Unknown service: $SERVICE. Use 'supabase'." >&2
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
Reference in New Issue
Block a user